Using a Duo integration that works fine on the testbed - using the latest source code - fails when deployed on a live IdP:
ERROR [net.shibboleth.idp.plugin.authn.duo.impl.HealthCheckDuoOIDCAuthAPI:80] - Profile Action HealthCheckDuoOIDCAuthAPI: Duo 2FA health check failed, current status 'FAIL', message 'invalid_client', message detail 'Failed to verify signature.'
Environment
Tested on IdP V4.1.4.
Duo nimbus based plugin V1.1.1.
Assignee
Philip Smart
Philip Smart
Activity
Rod Widdowson
August 19, 2021 at 1:32 PM
Reclosing to set resolution Status
Philip Smart
August 16, 2021 at 6:03 PM
Actually, I had a likely cut and paste error here. This works if the client secret is correctly specified.
Using a Duo integration that works fine on the testbed - using the latest source code - fails when deployed on a live IdP:
ERROR [net.shibboleth.idp.plugin.authn.duo.impl.HealthCheckDuoOIDCAuthAPI:80] - Profile Action HealthCheckDuoOIDCAuthAPI: Duo 2FA health check failed, current status 'FAIL', message 'invalid_client', message detail 'Failed to verify signature.'